Lucene search
HistoryJun 03, 2010 - 2:30 p.m.
CVE-2010-2143
symphony cms
cve-2010-2143
directory traversal
index.php
vulnerability
remote attackers
arbitrary files
nvd
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.4 High
AI Score
Confidence
High
0.018 Low
EPSS
Percentile
88.1%
Directory traversal vulnerability in index.php in Symphony CMS 2.0.7 allows remote attackers to read arbitrary files and possibly have unspecified other impact via a … (dot dot) in the mode parameter.
Affected configurations
Node
getsymphonysymphonyMatch2.0.7
| CPE | Name | Operator | Version |
|---|---|---|---|
| getsymphony:symphony | getsymphony symphony | eq | 2.0.7 |
Related
nessus
nessus
Symphony 2.0.6 mode Parameter Local File Inclusion
2010-06-07 00:00:00
prion
prion
Directory traversal
2010-06-03 14:30:00
openvas
openvas
Symphony CMS Directory traversal vulnerability
2010-06-11 00:00:00
cvelist
cvelist
CVE-2010-2143
2010-06-03 14:00:00
nvd
nvd
CVE-2010-2143
2010-06-03 14:30:01
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.4 High
AI Score
Confidence
High
0.018 Low
EPSS
Percentile
88.1%
Related for CVE-2010-2143